Double Extortion: Responding to Ransomware Incidents from a Lawyer's Perspective